Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
File: SMMR7eKLkvXGGpEr4GA5SYsjQio.mft (raw, json)
Hash identifier: XE/cYeGER8mfIxXS0nuwtVoEH+sNEiLSd+cJkPbNcVo=
Subject key identifier: F5:BC:DB:C7:95:9C:D6:39:16:C6:9B:EC:6F:B2:BF:3A:71:55:AC:C2
Authority key identifier: 48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
Certificate issuer: /CN=48c311ede28b92f5c61a912be06039498b23422a
Certificate serial: 0194BC3C303FB68793E3D99E19BCFA91F9AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
Manifest number: 0514
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: SMMR7eKLkvXGGpEr4GA5SYsjQio.crl (hash: A1VPF5FuUvC6cFoC7N2pedb0AnOQPXVumDRc8+lEyqI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:30:3f:b6:87:93:e3:d9:9e:19:bc:fa:91:f9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c311ede28b92f5c61a912be06039498b23422a
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=f5bcdbc7959cd63916c69bec6fb2bf3a7155acc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a6:42:3a:ad:68:fc:89:49:87:e5:4e:43:bc:
2b:a8:9d:7d:10:d7:50:4c:06:6f:34:f1:70:a2:8c:
4b:d8:bf:9f:f2:5a:11:f7:03:b8:f2:1a:73:8f:f0:
05:6b:fb:95:f6:14:03:4c:f8:6a:4a:7c:26:f9:24:
ae:5a:11:a6:ef:c0:55:97:11:70:de:9b:31:a2:b4:
87:f4:82:e0:10:74:1e:d3:75:b5:43:02:33:13:7f:
33:9c:a8:3b:f3:9c:59:a2:2f:95:b9:0d:8f:5e:a4:
e6:43:e7:14:0b:96:70:20:b4:f7:d3:2f:a8:80:3d:
5e:45:07:bd:92:80:67:2b:cd:b5:61:b5:34:be:82:
f0:55:eb:d4:69:7f:5c:63:53:f6:31:2b:a9:1a:a2:
f1:34:2a:1e:dc:cd:38:f3:eb:a8:20:45:39:0b:60:
04:0c:a1:56:69:7c:92:4d:62:84:0d:72:25:21:d0:
f2:ad:db:60:26:80:1d:e0:c3:2a:ed:87:b4:fa:f7:
71:23:f0:1c:ab:1e:dc:fd:ad:28:9f:63:72:2b:68:
68:12:c5:dc:74:cd:dc:a3:63:1b:ae:31:1c:e5:4c:
35:7b:49:06:2a:1d:cf:e4:33:a5:3a:ac:c2:c5:e2:
2f:aa:2d:76:68:9a:9f:5b:c1:14:5e:e1:92:20:b2:
b2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BC:DB:C7:95:9C:D6:39:16:C6:9B:EC:6F:B2:BF:3A:71:55:AC:C2
X509v3 Authority Key Identifier:
keyid:48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:3e:eb:f1:ef:a0:a5:8f:a0:29:aa:3e:a2:7e:1c:db:e6:de:
64:01:29:d4:92:9d:2f:33:ce:1d:da:7a:bd:c1:95:13:91:8f:
d0:44:5a:7c:85:b9:66:ac:95:ea:39:f4:9d:1d:53:67:4d:75:
7b:04:43:98:2d:1d:74:af:53:9e:2a:d4:00:0b:25:d4:e7:1b:
0e:b7:a5:31:e9:2a:99:54:16:f8:d7:52:ae:8f:60:6a:86:06:
48:3d:62:8a:58:cc:a1:4b:19:2b:35:3b:b2:85:ab:f7:12:6a:
f4:73:d5:af:db:5f:00:a3:01:d8:ea:03:67:83:d6:74:4e:c0:
65:89:7b:e5:95:bd:24:ca:1d:0e:89:32:9e:12:48:12:e9:68:
df:c0:f8:2b:bc:ac:1f:52:25:0d:cd:44:36:2e:78:4f:c8:70:
e2:44:6a:96:30:12:0a:a0:5d:27:6d:bc:33:cc:05:27:b7:35:
2f:92:90:fe:58:f8:da:d7:30:26:bb:bd:33:ea:bf:48:ad:3e:
77:2d:4e:e9:fa:14:be:5d:68:be:1c:3d:da:29:36:18:23:7c:
05:9d:14:b4:67:bc:4a:29:86:f5:be:5a:52:ae:b9:25:b5:96:
c5:7e:d1:30:65:79:0a:9a:f8:de:75:66:9a:89:d5:82:30:16:
03:c9:b8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:17 2025 by rpki-client